CVE-2012-3830

no score yetEPSS 3.8%

Cross-site scripting (XSS) vulnerability in decoda/templates/video.php in Decoda before 3.3.3 allows remote attackers to inject arbitrary web script or HTML via the video directive.

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2012-07-03
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

milesj:decoda

References

http://osvdb.org/81637
http://secunia.com/advisories/48931
http://www.redteam-pentesting.de/en/advisories/rt-sa-2012-002/-php-decoda-cross-site-scripting-in-video-tags
http://www.securityfocus.com/bid/53332
https://exchange.xforce.ibmcloud.com/vulnerabilities/75333

Check your stack JSON